powershell monitoring

[pamsniffer]

Hi,

Is there a way to minitor powershell command's with winbatch

Pam

[td]

I suppose it would depend on what you mean by "monitor".

[pamsniffer]

when some run a powershell command remotely that is monitored what is running
.

[stanl]

If you can run tListProc() remotely you could look for powershell.exe. It may get a little more complicated to determine an exact .ps1 file running.

[td]

The 'remotely' part would be a problem.  Whether using , the Process Extender, dotNet's process classes or WMI,  it would in some cases require that specific remote services are running and in all cases special permissions.